XTS provides confidentiality only. It does prevent an attacker from:
It’s the most widely deployed storage encryption mode in the world, yet it is often misunderstood. Developers sometimes treat it like a stream cipher or misuse it as a replacement for HTTPS. xts-aes-128
: While BitLocker supports various modes, XTS-AES-128 is often the default choice for software-based encryption on newer versions of Windows 10 and 11. XTS provides confidentiality only
Enter (XEX-based Tweaked-codebook mode with ciphertext Stealing). xts-aes-128